Class: Aws::IAMToolbox::Types::PolicyInfo

Inherits:

Struct

• Object
• Struct
• Aws::IAMToolbox::Types::PolicyInfo

Includes:

Structure

Defined in:

lib/aws-sdk-iamtoolbox/types.rb

Overview

Contains details about a policy evaluated during authorization. Details include the policy type, whether it is inline or managed, a URI that identifies it, and the entities it is attached to.

See Also:

• AWS API Documentation

Constant Summary

SENSITIVE =

[]

Instance Attribute Summary

• #attached_to ⇒ Array<Types::AttachedTo>

  The entities that the policy is attached to.

• #inline ⇒ Boolean

  Specifies whether this is an inline policy (true) or a managed policy (false).

• #type ⇒ String

  The type of policy.

• #uri ⇒ String

  A URI that identifies the policy.

Instance Attribute Details

#attached_to ⇒ Array<Types::AttachedTo>

The entities that the policy is attached to. For identity, session, and resource-based policies, this is typically a single entity. For organization control policies (SCPs and RCPs), it can be multiple entities at different levels of the organization hierarchy.

Returns:

• (Array<Types::AttachedTo>)

# File 'lib/aws-sdk-iamtoolbox/types.rb', line 260

class PolicyInfo < Struct.new(
  :type,
  :inline,
  :uri,
  :attached_to)
  SENSITIVE = []
  include Aws::Structure
end

#inline ⇒ Boolean

Specifies whether this is an inline policy (true) or a managed policy (false).

Returns:

• (Boolean)

# File 'lib/aws-sdk-iamtoolbox/types.rb', line 260

class PolicyInfo < Struct.new(
  :type,
  :inline,
  :uri,
  :attached_to)
  SENSITIVE = []
  include Aws::Structure
end

#type ⇒ String

The type of policy. Valid values:

• IDENTITY_BASED_POLICY - An identity-based policy attached to an IAM user, group, or role.

• PERMISSIONS_BOUNDARY - A permissions boundary for an IAM entity.

• RESOURCE_BASED_POLICY - A resource-based policy attached to a resource.

• RESOURCE_CONTROL_POLICY - A resource control policy (RCP) in AWS Organizations.

• SERVICE_CONTROL_POLICY - A service control policy (SCP) in AWS Organizations.

• SESSION_POLICY - A session policy passed during role assumption or federation.

• VPC_ENDPOINT_POLICY - A VPC endpoint policy.

Returns:

• (String)

# File 'lib/aws-sdk-iamtoolbox/types.rb', line 260

class PolicyInfo < Struct.new(
  :type,
  :inline,
  :uri,
  :attached_to)
  SENSITIVE = []
  include Aws::Structure
end

#uri ⇒ String

A URI that identifies the policy. Use this URI to cross-reference the policy with the matching policies in each evaluation. The value depends on the policy type:

• For managed policies, this is the policy ARN.

• For inline policies, which have no ARN, this is an opaque identifier.

Returns:

• (String)

# File 'lib/aws-sdk-iamtoolbox/types.rb', line 260

class PolicyInfo < Struct.new(
  :type,
  :inline,
  :uri,
  :attached_to)
  SENSITIVE = []
  include Aws::Structure
end